[jboss-user] [Security & JAAS/JBoss] - Help needed please, Authentication info propagation don't wo
What I try to do is:
Programatically establish an indentity in a servlet and propagate it to be disposable to
all the web applications on the same realm.
(I have to do it programatically for:
http://www.jboss.com/index.html?module=bb&op=viewtopic&t=102853
The code of my servlet is:
| try {
| UsernamePasswordHandler handler = new UsernamePasswordHandler("XXX",
"XXX");
| LoginContext lc = new LoginContext("MyDomain", handler);
| lc.login();
|
| }catch(Exception e ) {
| e.printStackTrace();
| }
|
|
And the log that I get is:
| DEBUG (MyLoginModule.java.java:98) - login()
| INFO (MyLoginModule.java.java:151) - User XXX ok with role YYY
| TRACE (org.jboss.security.ClientLoginModule.ClientLoginModule.java:103) - Security
domain: MyDomain
| TRACE (org.jboss.security.ClientLoginModule.ClientLoginModule.java:121) - Enabling
restore-login-identity mode
| TRACE (org.jboss.security.ClientLoginModule.ClientLoginModule.java:130) - Enabling
useFirstPass mode
| TRACE (org.jboss.security.ClientLoginModule.ClientLoginModule.java:139) - Begin
login
| TRACE (org.jboss.security.ClientLoginModule.ClientLoginModule.java:223) - commit,
subject=Asunto:
| Principal: XXX
| Principal: Roles(members:YYY)
|
| TRACE (org.jboss.security.SecurityAssociation.SecurityAssociation.java:460) -
pushSubjectContext, subject=Asunto:
| Principal: XXX
| Principal: Roles(members:YYY)
|
|
This is the debug code I get just after lc.login() in my servlet.
The problem is that then when the servlet ends I had this stacktrace:
| ApplicationFilterChain.internalDoFilter(ServletRequest, ServletResponse) line: 252
| ApplicationFilterChain.doFilter(ServletRequest, ServletResponse) line: 173
| ReplyHeaderFilter.doFilter(ServletRequest, ServletResponse, FilterChain) line: 96
| ApplicationFilterChain.internalDoFilter(ServletRequest, ServletResponse) line: 202
| ApplicationFilterChain.doFilter(ServletRequest, ServletResponse) line: 173
| StandardWrapperValve.invoke(Request, Response) line: 213
| StandardContextValve.invoke(Request, Response) line: 178
| SecurityAssociationValve.invoke(Request, Response) line: 175
| BasicAuthenticator(AuthenticatorBase).invoke(Request, Response) line: 432
| JaccContextValve.invoke(Request, Response) line: 74
| StandardHostValve.invoke(Request, Response) line: 126
| ErrorReportValve.invoke(Request, Response) line: 105
| CachedConnectionValve.invoke(Request, Response) line: 156
| SingleSignOn.invoke(Request, Response) line: 392
| StandardEngineValve.invoke(Request, Response) line: 107
| CoyoteAdapter.service(Request, Response) line: 148
| Http11Processor.process(InputStream, OutputStream) line: 869
|
Http11Protocol$JmxHttp11ConnectionHandler(Http11BaseProtocol$Http11ConnectionHandler).processConnection(TcpConnection,
Object[]) line: 664
| PoolTcpEndpoint.processSocket(Socket, TcpConnection, Object[]) line: 527
| MasterSlaveWorkerThread.run() line: 112
| ThreadWithAttributes(Thread).run() line: 595
|
And when the arrives at BasicAuthenticator I get:
| popRunAsIdentity, runAs=null
|
| and then:
|
| 2007-02-28 17:43:17,688 TRACE
(org.jboss.security.SecurityAssociation.SecurityAssociation.java:555) - clear,
server=true
It looks as if the credential are deleted, aren't they?
The login-config.xml has:
| <application-policy name="MyDomain">
| <authentication>
| <login-module code="MyModule"
| flag = "required">
| <module-option
name="password-stacking">useFirstPass</module-option>
| </login-module>
|
| <login-module code="org.jboss.security.ClientLoginModule"
flag="required">
| <module-option
name="password-stacking">useFirstPass</module-option>
| <module-option
name="restore-login-identity">false</module-option>
| </login-module>
|
| </authentication>
| </application-policy>
|
|
Please, please, please,...... someone can help in this nigthmare?¿
PD: All is to try to solve the problem I also explain in :
View the original post :
http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4023825#...
Reply to the post :
http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&a...